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^ Abstract 
P. 

■ We consider MIMO (Multiple Input Multiple Output) wiretap channels, where a legitimate transmit- 

' ter Alice is communicating with a legitimate receiver Bob in the presence of an eavesdropper Eve, and 

communication is done via MIMO channels. We suppose that Alice's strategy is to use a codebook which 
has a lattice structure, which then allows her to perform coset encoding. We analyze Eve's probability 
of correctly decoding the message Alice meant to Bob, and from minimizing this probability, we derive 
a code design criterion for MIMO lattice wiretap codes. The case of block fading channels is treated 



studied as an illustration of the analysis provided. 



, similarly, and fast fading channels are derived as a particular case. The Alamouti code is carefully 

> 

m 

^ I Index Terms 

. Code design criterion, Epstein zeta function. Error probability. Fading channels, MIMO channels. 



Wiretap channels. 



I. Introduction 



Wiretap channels were introduced by Wyner [1191 in the seventies as broadcast channels, 
where a legitimate transmitter Alice communicates with a legitimate receiver Bob through a 
noisy communication channel in the presence of an eavesdropper Eve. They have attracted a 
regain of interest recently, in particular in the context of physical layer security. We consider 
MIMO (Multiple Input Multiple Output) wiretap channels, for which the secrecy capacity, that is 
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the maximum amount of information that Alice can transmit confidentially to Bob, is known [10], 
[fT3l . ifTTI . We consider an alternative approach, which consists of studying the probability that 
Eve correctly decodes the message meant to Bob, as initiated in |l2l, [fT4ll for Gaussian channels. 
An early work by Hero m proposed a non-information theoretical approach to secrecy in MIMO 
channels, where a code design was proposed, based on the assumption that Eve is doing a non- 
coherent decoding. In ifTSl . the model of wiretap channel is further used to study secret sharing 
over fast fading MIMO channels. 

We consider the case where Alice transmits lattice codes using coset encoding, which requires 
two nested lattices Ae C A;,, and Alice encodes her data in the coset representatives of A^/Ae. 
Both Bob and Eve try to decode using coset decoding. It was shown in [|2l for Gaussian channels 
that a wiretap coding strategy is to design At for Bob (since Alice knows Bob's channel, she can 
ensure he will decode with high probability), while Ag is chosen to maximize Eve's confusion, 
characterized by a lattice invariant called secrecy gain, under the assumption that Eve's noise 
is worse than the one experienced by Bob. The contribution of this work is to generalize this 
approach to MIMO channels (and in fact block and fast fading channels as particular cases). We 
compute Eve's probability of making a correct decoding decision, and deduce how the lattice 
wiretap code should be designed to minimize this probability. 

This paper is organized as follows: in Section UIl we recall how Eve's probability of correct 
decision is derived for Gaussian channels, and extend the computation to include the case where 
low dimensional lattice codes are used. Section |lll] is the chore part of this paper, which contains 
Eve's probability of correctly decoding the confidential message when her channel from Alice 
is a MIMO channel. We consequently treat the case of block and fast fading channels in Section 
HVl The relevance of our approach is illustrated in Section IVl where the Alamouti code is studied 
following the newly introduced techniques. 

II. Gaussian channels 
We first consider a Gaussian wiretap channel, modeled by 

y = X + Vfc 

(1) 

Z = X + Vg 

over n complex channel uses, where x G is the transmitted signal, G C" and Vg G C" 
denote the Gaussian noise at Bob, respectively Eve's side, both with coefficients which are zero 
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mean, and have respective variance al and erf, where is assumed larger than cr^,. We assume 
that Alice knows Bob's channel cr^,, and uses Z[z]— lattice codes, namely x G A, where A is an 
m-dimensional complex lattice, which can be described by its generator matrix M Q: 

A = {x = Mu I u G 'LW}, 

and the columns of M form a linearly independent set of vectors in C" (so that m <n) which 
form a basis of the lattice. 

Alice performs coset encoding [fT9ll : she chooses a lattice A;, that she partitions into a union of 
disjoint cosets Ag + c, with Ag a sublattice of A;, and c an n-dimensional vector which encodes 
her data. Alice then randomly chooses a random vector r G Ag so that the transmitted lattice 
point X G Afo is finally 

X = r + c G Ae + c. (2) 
Why coset encoding is actually beneficial for wiretap lattice codes is illustrated in [14J. 



Recall from 



Elt 



that when m = n, the probability Pc,fe of Bob's (resp. Pc,e of Eve's) correct 



decision in doing coset decoding is: 



vol(Afc) ||.n2/2.g 

where V(Ab) denotes the Voronoi region of Af,. We need to discuss the case where m < n before 
proceeding. The notation we will use refers to Bob's channel, though the same holds for Eve's. 

The decoding rule for a Gaussian channel ([T]) when m < n is similarly to the case m = n 
given by 

min I |y — x| 



X 



|2 



where y = x'+Vf, is the noisy message at the receiver when x' is sent, except that now, x' = Mu' 
and X = Mu where M is an n x m complex matrix. By performing a QR decomposition of 
M, we get 

' R' 



M = QR = Q 







'a real channel was considered in f2\, the extension to the complex case discussed here is immediate. 
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with R' an upper triangular m x m matrix, and Q a unitary n x n matrix. Thus 

min||y-x||2 = min||g*(Mu' + V6) - Q* Mu\\^ ^ mm\\{Ru' + Q*Yb) - RuW^ 

X u u 

that is 







R'u' 




R'u 




min 



























where v|, is a new noise vector with the same noise statistics as since Q* is unitary. It is now 
clear from the above minimization that 

argmin ||y — Mu|p = argmin ||i?'u' + — R'ii\\'^ 

u u 

where v^' is the noise vector where the last n — m rows have been ignored, and thus the 
problem of decoding an m-dimensional lattice in an n-dimensional space can be reduced to 

perform the decoding in an m-dimensional space, showing that what matters is the dimension 
of the lattice, and not the one of the ambient space. Consequently, we have 

1 



c,6 



Pc,e < 



(27rcr^)™ 



V{A6) 



vol (A 



(27ra 



2\m Z— ^ 



(3) 
(4) 



when Alice sends an m-dimensional lattice (living in an n-dimensional space) to Bob. We are 
now ready to analyze the MIMO case. 



III. The MIMO case 

We now consider the case when the channel between Alice and Bob, resp. Eve, is a MIMO 
channel with rit transmitting antennas at Alice's end, rib resp. Ue receiving antennas at Bob's, 
resp. Eve's end, and a coherence time T, that is: 

Y = HbX + Vb 

Z = HeX + Ve, 

where the transmitted signal X is a x T matrix, the two channel matrices are of dimension 
rib X iT-t for Hb and rig x rit for He, and Vb, K are rib x T, resp. rie x T matrices denoting the 
Gaussian noise at Bob, respectively Eve's side, both with coefficients zero mean, and respective 
variance and a^. The fading coefficients are complex Gaussian i.i.d. random variables, and 
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in particular has covariance matrix Sg = cr|^ As for the Gaussian case (as described in 
Section |IIl), we assume that Alice transmits a lattice code, via coset encoding, and that the two 
receivers are performing coset decoding of the lattice, thus rib, > rit. Indeed, if the number 
of antennas at the receiver is smaller than that of the transmitter, the lattice structure is lost at 
the receiver. This case will not be treated. Finally, we denote by 7e = crj^Jcr'^ Eve's SNR. We 
do not make assumption on knowing Eve's channel or on Eve's SNR, since we will compute 
bounds which are general, though their tightness will depend on Eve's SNR. 

In order to focus on the lattice structure of the transmitted signal, we vectorize the received 
signal ([5]) and obtain 

vec(r) = vec{HbX) + \/ec{Vb) 



\ 



\ 



H, 



vec(X) + vec(Vb) 



(6) 



vec(Z) = vec (i/eX) + vec (V;) 



\ 



\ 



vec(X) + vec(V;). 



(7) 



We now interpret the rit xT codeword X as coming from a lattice. This is typically the case if 
X is a space-time code coming from a division algebra Hi 61 , or more generally if X is a linear 
dispersion code as introduced in |[8| where Tut symbols QAM are linearly encoded via a family 
of Tut dispersion matrices. We write 

vec(X) = MfeU 

where u G Z[i]^"* and Mb denotes the Tut x Tut generator matrix of the Z[i]— lattice A5 intended 
to Bob. Thus, in what follows, by a lattice point x G A^, we mean that 

X = vec(X) = MfeU, 

and similarly for a lattice point x G Ag, we have 

X = vec(X) = MeU. 
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By setting 

Mb,H, = diag(/ffe, . . . , iffe)Mfe, 

we can rewrite ^ and ([7]) as 

vec(F) = M,,^,,u + vec(H) 

(o) 

vec(Z) = M6,^^^u + vec(V;), 
where Mh^Ht^ resp. M;,/;^^ can be interpreted as the lattice generators of the lattices Ah^H,,, resp. 
M,H^, representing the transmitted lattice seen through the respective receivers' channel, with 
by definition volumes 

vo1(A,,hJ = |det(M,,^,M*_^J| = |det(if,/7*)rvol(A,) 
vo1(A,,hJ = |det(M,,j,^M*^J| = |det(//e^:)rvol(A,). 
Similarly, the lattices A^^Ht, resp. A^^He describe the lattices intended to Eve, seen through 
Bob's, resp. Eve's channel, with respective generator matrix Me^n^ = diag(/f6, . . . , Hh)Me and 
Me,H. = diag(i/e, • • • , H,)Me. 
Note that for r G A^^h^, we have 

||r|p = ||diag(i7„ . . .,H,)M,u\\^ = \\6\ag{H,, . . .,H,)^\\^ = \\H,X\\l (10) 

where ||ifeX|||. = Ti{HeXX*H*) is the Frobenius norm, and x = vec(X) G Ag. 

For a given realization of the channel matrices He and Hf,, the channel ^ can be seen as the 
Gaussian wiretap channel 

y = Mb,H,u + Vb ^^^^ 

Z = Mb,HeU + Ve, 

where y = vec(F), z = vec(Z), V5 = vec(V6), Vg = vec(\4)- We now focus on Eve's channel, 
since we know from [fTTl how to design a good linear dispersion space-time code. We know 
from dl]) that Eve's probability of correctly decoding is 

V0l(Afe.JfJ V- -l|r||V2.? Q2) 



^^iem„:fY:e~««--^«i^ (13) 



^Note that if A has generator matrix M, we define its volume to be | det{M M*)\^^^ if A is real and det(AfM*) if A is 
complex. 
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where last equality follows from Q and (flOl ). with x = vec(X) G Ag. Note that as mentioned at 
the end of Section HH the exponent of 2'nal depends on the dimension of the transmitted lattice, 
which is here ritT. 

Using Equation (fT3l) . we derive Eve's average probability of correct decision: 



c,e 



< 



vol(Ab) \ - 

vol(Afe) 



(27ra2)r'^'(27r)"'="t det(Se)"t 



xeA 



vol(Ab 



(2vra2)^"*(2vr<) 



xeA 



5^ / det{H,H:fe 



Tr 



— Inf -\-—^XX* 



(14) 



By setting W = H*He, we note that the above integral can be rewritten as 

det{HeH*fe 



yXX- 



dH, V dW, 



(15) 



where is the set of all Ut x ut positive definite Hermitian matricej^. We have, since we 
assumed Ut <ne, from Theorem 2.1 in [12], that 



/ det{H,H:) 

jH*He = W 

(det W) 



-\ — In+ + XX 



rie—nt+T 



-Tr W 



where Tnt {ue) is the multivariate gamma function which can be developed as 



nt 



r„, M = 7r"'("'-i)/2 jj r - + 1) . 



k=l 



Note that W is definite witii probability one since He iias full rank with probability one. 
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Now, Equation (fl?)) becomes 

vol(A;,)7r"-"* 



Pre < 



rie—nt+T^ 



-Tr W 



— In+ +7~T^^* 
^ e 



vol(Afe)7r"-"T„,(ne + T) 
r„,(ne)(27raf)«*^(27ra|,J«en. Z^--V2a|,/"' ' 2^^ 



6^ E ( TrVln. + A^^^ 



xeAe 



-ne-T 



dW 



(16) 



where the last equality comes from |[6l 

j (det VT)'' exp {-Tr {T.~^W) ] dW = 7r3P(P-i)r(p +k)---T{l + k) (det S; 



where is here the set of all j9 x p positive definite Hermitian matrices. 

We finally obtain that an upper bound on the average probability of correct decoding for Eve 

is 

r- ^ (17) 



Pc,e < CMIM07f"' Yl (I"' + 7e^^*)^ 



■Ue-T 



xeAe 



where we set 7e = for Eve's SNR, and 



MIMO 



vol(Afe)r„,(ne + r) 

7r"*^r„,K) ' 



In order to design a good lattice code for the MIMO wiretap channel, we try to derive a code 
design criterion from Equation (fT71) : 



Pc,e < C'mIMOT, 



Tnt 
e 



1+ J] det(I„, + 7eXX*)- 
xeAe\{0} 



■n„-T 



We can suppose that the space-time code used to transmit data to Bob is designed according to the 
so-called "rank criterion" of [17|. This means that, if X 7^ and T > rit then, rank(X) = rit. If 
we assume now that Eve's SNR 7e is high compared to the minimum distance of Ae, or actually 
design Ag that way assuming Alice knows Eve's channel, we get 



le A \ rr,l 



Pc,e<CMiMO ir + -^ 2^ det (XX*)-"'^-' . (18) 

xeAe\{0} 

This expression is decreasing as a function of 7e around the origin, a regime which we do not 
consider (as we just derived the expression assuming 7e big enough), and is then indeed increasing 
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as expected. The minimum value of this upper bound (computed by taking its derivative) is 
achieved for 



nt(ne+T) 



7e 



xeAe\{o} 

We thus conclude that to minimize Eve's average probability of correct decoding, the design 
criterion is now 

" ^ (19) 



mm 

xeAA{o} ^ 



It is important to notice that the upper bound was computed using an infinite lattice Ag. In 
some rare cases, as for an example in the case of the Alamouti code discussed later on, the 
bound happens to be finite even though the lattice is not. In general, it is not, in which case 
the bound refers not to the infinite lattice Ae, but instead a finite subset carved from Ag via a 
shaping region. The same holds for the bounds derived below for block and fast fading channels. 



IV. Block and Fast Fading Channels 

In particular, when Hb, are diagonal matrices (and setting rit = Ub = Ug = n), the channel 
^ can be rewritten as 

Y = diag(h,)X + H ^2^^ 

z = diag(he)x + v;, 

which corresponds to a block fading channel with n transmit antennas emitting one after the 
other, coherence time T and 



diag(h;, 



V 



^b,n J 



diag(he 



V 



hp 



\ 



J 



(21) 



However, we cannot use the final result for MIMO channels immediately, since the integral 
over all positive definite Hermitian matrices does not hold anymore. Moreover, the general 
expression of (fT5l) does not hold either since it assumes that i^e (here diag(he)) is i.i.d distributed. 
We thus start from the generic equation (fT3l) . which gives, using a polar coordinates change. 
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and the change of variables Ue,i = p\ 

vol(Ab 



2 

e.i 



En/ 



xeAe i=l 



(27r)»vol(At) 



En 

e-' xeAe i=l 



(2vra2)n^(27rOn 
(2vra2)nT(2O«£^ll,0 



|2T 



.2T+1, 



T 



dup 



r(l + T)"vol(A 
(27ra2)"T(20 



<=' xeAe i=l 

n r 



En 



1 1 

+ 



n -1-T 



2< ' 



xeAe j=l 

We finally obtain an upper bound of the average probability of correct decision for Eve for the 
wiretap block fading channel, given by 



21 -1-T 



xeAe «=i 



(22) 



where 



(T!)"vol(A,) 



BF 



TT 



nT 



^2 



and similarly to the MIMO case, 7e 

In order to design a good lattice code for the block fading wiretap channel, we now try to 
derive a code design criterion from (|22|) : 



Pc,e < Cbf7, 



Tn 

e 



1+ E n [1+7^11^^11'] 

xeAe\{0} i=l 



21-1-r 



We can suppose that the code used to transmit data to Bob is designed according to the minimum 
product distance criterion. This means that, if x 7^ 0, then, Xj 7^ for any i. If we assume this 
time that Eve's SNR 7e is high compared to the minimum distance of Ag, or actually design Ae 
that way assuming Alice knows Eve's channel, we get 



7j" + 



^ E mm' 



-1-T 



xeAe\{0} i=l 

This expression is decreasing as a function of 7e around the origin, a regime which we do not 
consider (as we again just derived the expression assuming 7e big enough), and is then indeed 
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increasing as expected. The minimum value of this upper bound is achieved for 

^xeAe\{o} 

7e - ■ 



We thus conclude that to minimize Eve's average probability of correct decoding, the design 
criterion is now 



mm 



E 

xeAe\{o} 



When furthermore T = 1 (and X is thus a n x 1 vector x) in (|20l) . we get a fast fading 
channel: 

y = diag(h;,)x + Vb 
z = diag(he)x + Ve, 

where all vectors are n-dimensional complex vectors corresponding to n usages of the channel, 
and 



diag(h;, 



V 



\ 



h 



diag(he 



b,n J 



( 



\ 



\ 



as before (see (I2TI)'). We can thus immediately apply the result (|22l) to deduce that 




(23) 



where 



FF 



voKAb) 



TT'' 



and still again, 7e = The design criterion follows accordingly 



E 

x6A,\{0} 



mm / „ 



We thus recover the expressionspresented in [3 1, though here in the complex case, which explains 
the difference in the exponent □. 



''Please note an erratum in fj), since tlie sum derived there is over all lattice points, while of course, the zero vector should 
be removed from the sum. 
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V. A MIMO example: The Alamouti Code 

In this section, we illustrate the code design criterion derived above using the Alamouti code 
[[il with QAM constellation, rit = 2, rie > 2 and T = 2. An Alamouti codeword is then of the 
form 

Xi X2 

2 "''I 



X 



Xi, X2 G Z[i] 



so that 



where 



det (XX*) = (|xi|' + \x2fY = ||x 



Xi 

X2 



e = Ae. 



The design criterion (1191 ) requires to study 



J2 det (XX*)-"=-^ = Yl 



1 



|2(2(ne+r)) 



Ca. (2 K + 2)) 



(24) 



XGAe\{0} 



x6Ae\{0} 



where we recognize the Epstein zeta function of a scaled lattice fiA {jj, > 0), defined by 



1 1 



1 



llxf ^ /i^^ 



-^Ca(^). 



(25) 

xeA\{o} 

Since x G Z[z]^ ~ Z^, we will consider as possible lattices Ae either Z'^ itself, with Epstein 
zeta function (see Proposition [3] in Appendix) 

Cz4(s) = 8(l-4^-^)C(s)C(s-l) (26) 

or D4, in which case the vector x above is coded, and belongs to instead of Z^, which in 
turn involved the Epstein zeta function of D4 (see Proposition |4] also in Appendix) 



U(^) = 3-42-^ (2-i-i)c(.)C(.-l). 
In both cases, ({s) = ^„>o ^ is the Riemann zeta function. 



(27) 



^The complex construction D4 = (1 + + (2, 1, 2) may be used, for instance, where (2, 1, 2) is the repetition code of 

length 2. 



April 24, 2012 



DRAFT 



13 



In order to compare the Epstein zeta function of the two lattices and D4, we rescale 
D4 so that its fundamental volume is equal to the fundamental volume of Z^, that is 1. Since 
vol {D4) = 2, the scaling factor is /i = Combining (l27l) and (l25l) . we obtain 

C^^dM = (^)''3-42-(2-i-l)C(s)C(s-l) 

= 3 ■ ■ [r-^ - 1) C{s)C{s - 1) (28) 

where s = 2ne + 4, which we have to compare with 

Cz4(s) = 8(l-4i'^)C(5)C(s-l). 

We eventually define the gain ^^4, obtained by using D4 instead of (the uncoded case) as 



— ^ / N U=2ne+4 
Cd4(s) 

-2341-^(1-4^-1) 

3 ■ 2^-3! . (2--1 - 1) 

1 



3-2t 



- (2-1 + 1) 



s=2ne+4 



92ne+3 I 1 A 



3 ■ 2"-+i 3 

We illustrate the obtained results on Figure [U by plotting the upper bound (fTSl ) on Eve's 
probability Pc,e of correct decision, divided by the constant Cmimo, when the Alamouti code is 
used with as coarse lattice Ae either Z"^ or D4. 

Notice that when 7e is small, this upper bound becomes of course very loose as it is a 
decreasing function in 7e, while we expect on the contrary Pc.e (7e) to be an increasing function. 
This motivates the following discussion the tightness of the upper bound (fTSi) . 

We go back to the tighter upper bound (fTTI) on Pc/. 

det + 7,AX*)-"=-^ 

xeAe 



Ke < C7miM07J"' Y1 (I"* + ^eXX*) 

xeAe 

/I \ """^"^ 

V7e ; 

V ' 

VAe (7e) 

When X is a codeword from the Alamouti code, with T = rit = 2, then 
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Alamouti Code - 2 receive antennas 



16 
14 



c 12 
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— A,=Z 


4 














— Ae^D 


4 





















































1.0 



1.2 



1.4 1.6 

ye 



1.8 



2.0 



Fig. 1. An upper bound on q-^^'^^ ■ the Alamouti code with = 2. 



SO that 



-ne-T 



X6A. (^J- + ||x 
7e^ + 7e-^"^ E 



2(ne+2) 
1 



xeAe\{o} I J- + llxf 



2(ne+2) ' 



We are thus interested in the calculation of 



(30) 
(31) 

(32) 



Ca, (s,a)=V- L^ = i_+ ]_^^ a = —, s = 2{ne + 2) 

±r(a+l|x|r) ^rTrn. fa + l|x|r) 7e 



x6Ae V ' II II y xeAe\{o} 
which will be done via the Mellin transform 



0} +11^11 y 



M{f){s) = / f{t)f-'dt, 
Jo 



thanks to which we obtain the following: 
Lemma 1: If a < llxlP, we have that 



1 



°° aT{s + k) ( 1 



s+k 
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Proof: The Mellin transform of e ("+11^11^)*, for some positive a G M, is 



(a+||x|r)^yo u 



r(s)- — (33) 

(a + ||x|| j 



which we can alternatively write as 



A^(e-K""ll')*)(s) = >l(e-"*e-l'''l''*)(s) 

. + 00 +00 / , xfc i. 



"^"J fc=0 

i.— n V / 



fc=0 

Now (|34|) involves a dangerous exchange of an integral with an infinite sum. For it to be allowed, 
we need to check that 



.^=0"^" / neN 

converges for every t in the integration range, which is the same as showing that 



^fc=0 II II / / 

converges for every t in the integration range. Since we only have strictly positive terms, 
comparing the nth term with the (n + l)th term yields, recalling that since s = 2(n2 + 2), 
Y{s + n) = {s + n- 1)!: 

a s + n 



2 



n + 1 I |x 

whose limit needs to be stricly smaller than 1, that is 



r a s+n a 

hm — -^TT^ = < 1, (35) 

n-s>oo n + 1 X r X r 



showing that the above computation is valid when a < | |x| | . We then have, comparing (1331) and 
(1341) . that 

1 _ g (-l)'^a'=r(s + A;) f 1 



(«+l|xf)^ U ^' r(.) V 11x11^ 
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We are now ready to prove the following result for Z'^. The equivalent result for D4 follows, 
and the consequences of both computations for the bound on the error probability can be found 
below in Corollary [U 

Proposition 1: Suppose < a < g. For the lattice Z'^, we have 

«' ^ ^ FTW ^ £ (^^2 ■ - £ 

xez4 ^" ^ ll^ll } j=o ^ ' -^^ k=o ^ ^ \ j=2 

where r4(j) denotes the number of vectors of norm j in 7^. In particular if < a < 2, we have 

and 

c^.(-)^i:(^-B-4-(i-9'4i:-w(i-f 

if < a < 4. 

Proof: Since Z"^ is an integer lattice with vectors of norm 1, we have ||x|p>lifx7^0, 
that is we need a < 1 to use the above lemma. Alternatively, if we consider lattice points whose 
norm is at least q, we can use a < q, which gives 



^{a + jY ^ fc! T(s) Vllxll' 

V r^j) I ^ (-l)^^r(. + fc) ^ 1 
^(a + jY ^ k\ Vis) ^ 11x11^^'+'=) 

" ^(« + ^')^ ^ ^' r(.) 1^^^^^^ + ^^ 1.,... 

where CaeI-^) is the Epstein zeta function of A defined in (|25] ), and r4(j) counts the number 
of vectors of norm j in Z"^. We were allowed to exchange both infinite sums since ChA^ + ^) 
converges, and thus so does Chei^ + k) — J2'j=i every A; > 0, and 
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converges as well, which follows from 

+ (CA.(s + n + l)-E-:;7^#Tj ^ + a ^ 

{n + 1) {CaAs + n)- Er=i F^) " + 1) ^ ^ ^ 
when n grows, noting that 



^a-T/t-TJ- z — ^ IIyII^(*+") IIyI|2 ~ a ^ IIyII^(*+")' 
i = l xeAe,||x||2>g ll^ll 1 1^1 1 ^ xeAe,||x|p>g ll^ll 

The Epstein zeta function of the lattice TJ^ is given (see Proposition [3]) by 

Cz4(s) = 8(l-4i-^)C(s)C(s-l) 

and since s = 2{ne + 2) > 8 when n2 > 2, C(s + k)(^{s — 1 + A;) can be approximated by the 
smallest value of k and s, namely C(8)C(7), where C{7) ~ 1.00835. Thus 

c^.{s +k) = 8(1 - A'-''')as + k)as + - 1) ^ 8(1 - 4^-^-^), 

and, using that r^^l) = 8 (there are 8 vectors of norm 1, the 4 unit vectors and the same vectors 
with a minus sign) 

V 1 ^ V ^4(j) .^ i~l)'a'r{s + k) ( ^r4(j)' 

^ (a+UfV ^(a + jY ^ k\ Vis) l^^^ ^ ' 2^ js+k 
xez* II II / i=o ^ ' "'^ fc=o ^ ^ \ i=i 

^ V r4(j) ^ (-l)^a^r(. + A:) / 1-.-, r^r4(j)' 
In particular if g = 2, we get that 

^(a+||x||^)^ {l + aY ^ 4^ A;!r(s) 

+ 00 / \ k / , J T 

+ 00 / \ fc / 1 

-a \ / s — 1 



1 






+ 


1 






+ 






1 






+ 







4 / V 

recalling the definition of Gamma functions for positive integers. In summary, recognizing the 
generalized binomial coefficients, we get 

1 18 / a\s 
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If instead g = 4, we note first (this first inequality holds for any q but not what will follow) 
that ^ ^ 



i=2 ^ i=2 

SO that 

xez4 («+ll^f) 

< V , ^ (-1)^ V{s + k) 1 ^ ^ (-1)^ r(. + k) 

j=0 ^ ' k=0 ^ ' ^ j=2 k=0 ^ ^ ' 

^(g + j)^ V a) q^j^^ ''^"y q 

The condition q = A ensures the convergence of the second series. 
Proposition 2: Suppose < g < g. For the lattice D^, we have 

where r£)_^{j) denotes the number of vectors of length j in D^. In particular, if < g < 2, we 
have 

and 

(s, g) = - + ^^i^ - 3 ■ f 1 - 
^ ' ^ g« (g + 2)« V 4/ 

for < g < 4. 

Proof: The following computed above for holds similarly for D4 

^ 1 rn,{j) , ^ (-l)^g^r(. + fc) /^^ , f^r^.(j) 

xe-D* V ^ II II / j=o ^ ' k=o ^ ' \ i=i •' 

where we use the notation ro^ij) to denote the number of vectors of length j in D4^. Note that 
has no vector of norm 1, and 24 of norm 2. 
From Proposition HI the Epstein zeta function of D4 is 

CoAs + k)=3- A'-'-' {r+'-' - 1) ({s + k)as + k-l), 

and as before for 

Cd4(s + A;) ^3-42-^-^ (2^+'=-i-l), 
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SO that 

1 ^ rp^U) (-l)^a^r(g + A:) / .-s-fc (^.s+k-i _ i ^ ^i^4(j) 

^g4(j) (-l)^a^r(3 + A;) / .2-.-fc _ rD4(j) 

^ (a + j> ^ k\ T(s) [ ' ^ f+f' 

If g = 2, we can simplify the above expression to get 



sr ^ = 1 ^ (-i)-a^r(. + fc) ^ 

^ fa+ llxfr ^ A:! T{s) ^ > 



l_3.42-y 



a' ^ 4*= A;!r(s) 

a' V 4 

while if g = 4, recalling that D4 has no vector of length 3 

1 +_ii__3.4-ri " 



a'' (a + 2)^ V 4 



The implications of the above computations for the error probability are summarized below 
for 7e > 1/2. Similar expressions can be obtained for 7e > 1/4 (or smaller values of 7e). 
Corollary 1: Suppose 7e > 1/2. We have when using Ag = that 

Pc,e<CMIM07e (^7e + + 1/^^)2^+2) " ^ " ^ " 4^ J 

while with Ag = D4 

( / 1 \2(ne+2)^ 

Pc,e < Cmimo7.-^"^ I 7f("^^^^ - 3 ■ 42-^(-+^) (^1 - ^ j 
See Figure [2] for an illustration of the new bounds. 

VI. Conclusion 

We considered a MIMO wiretap channel, where Alice uses lattice codes via coset encoding 
to communicate with Bob in the presence of an eavesdropper Eve. We showed, by analyzing 
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Eve's probability of correctly decoding the message meant to Bob, that this probability can be 
minimized by designing the lattice codes according to a suitable design criterion. The cases of 
block and fast fading channels are treated similarly. We also illustrate how our analysis applies to 
the Alamouti code, making explicit an interesting connection to Epstein zeta functions. Current 
and future work involve a more systematic design of such lattice wiretap codes. 
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Appendix 

In this appendix, we compute the Epstein zeta functions of and D4. 
Recall that the Epstein zeta function of a lattice A is defined by 

(37) 
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where rA{n) is the number of vectors of A with a squared Euclidean norm equal to n. Note that 
r\{n) similarly appears in the theta series of A: 

xeA\{0} n>0 

Proposition 3: The Epstein zeta function of Z4 is 

Cz4(s) = 8(l-4i-^)C(s)C(^-l). 

Proof: We have 

n>0 

where rj\f(n) is the number of solutions to the Diophantine equation + + ■ ■ ■ + kj^ = n 
(counting permutations and signs). We now use a result of |[T5l Paragraph 91], better exposed 
in a, 

r^{n) = 8a{n) - 32a (^^) 

where a{n) = J2d\n'^ understood that cr(m) = if m is not a positive integer. In 

particular, this implies that 

Ecr(n/4) (T(m) 

n>0 m,>0 ^ ' 



We thus obtain 



n>0 n>0 

= 8(i-4-^)y^ 

n>0 

= 8(l-4i-^)C(s)C(s-l) (38) 

where the last equality comes from [7, Chapter XVII] and C,{s) = Yl,n>o ^ Riemann zeta 

function. ■ 
Proposition 4: The Epstein zeta function of D4 is 

C^,{s) = 3 ■ A'-^ (2-i-l)c(.)C(.-l). 

Proof: The lattice D4 is the 4— dimensional checkerboard lattice i.e., the set of all 4 
dimensional integer valued vectors whose components have an even sum. Its theta series is 
well-known |[5l and is equal to 
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where 

n>0 

is the theta series of Z"', whereas 



- E(-i)2?'^^ E(-i)3^'^ E(-i)4V^ 

felSZ A;2eZ fcaSZ fc4 6Z 

^ (^_-]^^fcl+fc2+A;3+*;4^fc?+'=2+'=3+'=4 

fci,fc2,A;3,fc4GZ 

= i + E(-ir^4(n)g" 

n>0 

since /ci + A;2 + /ca + A;4 = /c^ + A;| + A;| + A;| mod 2. Thus the theta series of D4 can be rewritten 
as 

QdAq) = Ml + E^4(n)g" + l + E(-ir^4(n)g") 

\ n>0 n>0 / 

= l + ^EWn)g"+(-irr4(n)g-), 

n>0 

showing that the Epstein zeta function of D4 is 

1 r4(n) + (— l)"r4(n) 



Cd<s) = -E 

n>0 



1 ^ (-l)"r4(n) 



1 1 ^ 



n>0 



Using again as in the above proof that 

r4(n) = Sa{n) - 32a (J^^ 

we get 

- 4('E(-ir#-4^-^c(«)c(«-i) 

\n>0 



aim] 
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since El Chapter XVII] 



We are left to compute 



n>0 



n>0 n odd n even 



^ n" ^ 2"^ ^ 

nodd ii>0 raodd 

nodd \ t)>0 



2-^ r,s \ 



-,2-s 



\ 1 - 21-^ 1 - 2- 

n odd 



where the second equality follows from the multiplicativity of a. Since similarly 

2^- 2- 



n>0 nodd 



1 - 21-^ 1 - 2- 



a comparison of both expressions yields 



^o{n) ^ o{n) / -1 + 1321^ - -TT- 



n>0 n>0 \ 1-21-'' ^-2- 

22-" 1 

C(5)C(^-i) 



l_2i-s 1-2- 



22-s _|_ 1-21- 



^ 1-2 

")2 — O — ■5^ /'I oi — 

C(^)C(^-i) 



22-^(1 - 2-^) -(1-2^ 
22-^(1 -2-^) + (1-21-^)2 

C(s)C(s - 1) (2^-^ - 2^-2^ + 2^-" - 1) , 



and we obtain that 



= 4 (22-^-22-2- + 2^-^-1 -41-^) C(s)C(s-l) 

n>0 

= 4 (2 ■ 2^-^ - 2 • 2^-2- + 2^-" - 1) C(s)C(s - 1). 
We finally obtain the expression of the Epstein zeta function of D^: 

... \^ (-i)V4H 



2 ' 2 ^ ra^ 

n>0 



4 (1 - 4I-") C(s)C(s - 1) + 4 (3 • 1^-' - 2 ■ 2^-2^ - 1) C(s)C(s - 1) 

4(_3.22-2« + 3-2i-^)C(s)C(s-l) 
3.42-s (2-i_i)^(,)^(,_i). 
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